https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T15:54:01.972631+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-82289 CVE-2026-82289 — Gitingest Prefix-Based Git Host Check Enables Request Forgery and Token Disclosure 2026-10-09T15:54:01.988119+00:00

Affected: coderamp-labs gitingest

Gitingest through 0.3.1 fails to properly validate hostnames in _validate_host, accepting any host with a git., gitlab., or github. prefix regardless of known-hosts list membership. Attackers can submit URLs with attacker-controlled hostnames to trigger outbound connections to arbitrary hosts and disclose GitHub personal access tokens via HTTP basic credentials.